MAL-2025-132623 Malicious code in continuous_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cda5608135b7936c91426b216d411bf94032f88e996c0c2880ebd4b70130f4c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135511 Malicious code in maya-kue58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6041527bb979a0baaa2f2cee884af17e9df257998b4881a3b1c1380e7222adc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136952 Malicious code in sinta-mangut31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9b404daf32f27a6d1e3b2de1129bbfff2217fe60a7ce05af9d5fb907ce8fb57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-semur94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ead358ad1897123fe800913b3dbe82c264fc18599770882730ed2abd8396fd48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in female_leopard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c1554adb655f272a8485953e2b3f176b2dfabb2c69131465e2e72ea9278cfaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-klanting64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a422b3e16f0f175796c0bc2e23af195a42c6f93d404bfa7e89bc55191029238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-tempe25-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ba8e3585e2cbd6c495abc1716e0b006dc21d428abd47a34c60647b937ea304 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mere_chicken_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ced9d9f9a9fec01e1c669228037890fc68856dd0d12a1d529aa4c67eb740739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-telur97-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55271aa3d4422dca02772f9e4e47e7aee8cebd0fb0f41baca1ff4c61016d9ee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nearby_wasp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dfb6033e6993ce89bc38a9260137db6e8b9659a8d22eca5b3df75261b0796d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-lapis47-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3589e5217ade695b5da065b9a951fceb51a0a90917c580d44a4f81db80b4cd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in isolated_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc658cee021d7a3f18c3c398e6b81e651cf8f36bbf82e2d51e2ab8a3af4f47d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-esdoger64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff9b2a28095b071ede501fd781813e9026f5dd1f32dc40a53cb2bebaafa3ab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-kue91-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff04f8997955b56f05de6c4f6a6998792dbf7c1c4cb771ed6f90853887b0afa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-empal26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96482708d220262d9363c02a1f0fea9b980128b92b8271da67f1536db50bac74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-kue48-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6fc0a2e375ef6c533ef1594364e2387b307086362ad5215ce961e44b06ba236 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-lontong72-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef838133607d54c37203b544f312f39acec08fcc35c968d0ef836e26463802e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-mangut50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c6d4cc1b94d719043ceb03d9eb69bbcb48050536706622a572621352266db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moral_orangutan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb43126906e81eb4b92351b361e65aa3815b79ba86e989b75cc8a35342a27da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-bika88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85bab8c9b5c577800ac2af98f7d48d85c57ebfcbf8d46705a4b04df752366b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...